Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
File:                     RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft (raw, json)
Hash identifier:          8GEJN2TXqBlocNqU+jD6PzwGdamm170rajheLPNB8ZE=
Subject key identifier:   7C:48:8A:A4:65:95:08:66:61:54:6D:61:33:E0:C3:AE:FA:64:0C:20
Authority key identifier: 44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5
Certificate issuer:       /CN=44b1467c20481d11b67ff7bac6498959f718e1f5
Certificate serial:       0198D7A8A5254FD1E514B8BF44621D658903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
Manifest number:          04A7
Signing time:             Sat 23 Aug 2025 16:00:10 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:10 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:10 +0000
Files and hashes:         1: RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl (hash: U7Sfqe9hezeJ/YyW3TuvOIIIIbJ8QeY6Y8WA7gdR0d0=)
                          2: knBsZ4wjpF8zeO3oZHgDCU3JzpY.roa (hash: TYTzhZiCS0TYNybiAGDqTJecyl1aRzohizYpYrTciOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a8:a5:25:4f:d1:e5:14:b8:bf:44:62:1d:65:89:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b1467c20481d11b67ff7bac6498959f718e1f5
        Validity
            Not Before: Aug 23 16:00:10 2025 GMT
            Not After : Aug 24 16:00:10 2025 GMT
        Subject: CN=7c488aa46595086661546d6133e0c3aefa640c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:53:4a:7e:c0:84:81:7a:38:15:8e:a3:2e:c0:
                    2d:a0:4b:d3:23:cf:f0:2f:57:15:0e:d6:9c:23:93:
                    3e:fc:b3:62:2b:d1:90:0c:fa:e3:02:12:d9:e2:7d:
                    3a:4b:ca:88:62:c5:5e:b6:4d:b0:20:fe:39:86:3e:
                    da:bc:d4:5e:75:12:66:b3:3f:db:4b:9c:c2:0f:ef:
                    9e:f9:de:26:7e:08:08:43:eb:e1:e9:ca:24:4b:8c:
                    8e:ba:08:1c:d4:c8:52:52:b2:ce:45:6a:94:b3:f8:
                    61:cd:bd:62:3b:87:2c:42:9a:6a:59:eb:8e:e1:f8:
                    18:90:9b:cc:80:ff:fb:6a:54:6c:ca:c8:de:5b:65:
                    48:cd:f2:d9:2b:bf:94:45:88:67:e2:f7:b1:39:01:
                    a2:9c:e8:39:48:fd:4b:8c:af:8d:f8:83:17:dc:b1:
                    57:12:51:47:6f:a1:e1:64:3a:b8:76:e2:35:6f:a3:
                    c1:07:88:b4:53:c3:d2:3f:35:42:01:08:06:f3:53:
                    27:e0:a4:76:2f:8e:ae:00:53:1a:19:e6:ec:74:6d:
                    5b:fe:5f:38:a2:b7:d0:a1:d8:dc:84:e4:7e:50:57:
                    ff:f9:8d:59:e3:98:f8:25:25:aa:86:b4:7e:7c:a1:
                    7c:06:26:c4:29:a8:33:70:39:cc:70:c8:72:28:76:
                    1e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:48:8A:A4:65:95:08:66:61:54:6D:61:33:E0:C3:AE:FA:64:0C:20
            X509v3 Authority Key Identifier:
                keyid:44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:8b:d4:21:84:93:80:f9:89:ed:64:13:0b:04:d7:b1:79:94:
         2a:62:21:5c:e8:11:a0:13:70:c2:97:12:17:cb:df:10:09:08:
         09:37:9c:66:87:aa:43:60:e9:32:29:b7:3e:f9:0b:a3:61:a7:
         f1:80:0a:00:f1:f1:89:1c:b1:05:9e:fd:34:e4:39:99:bf:7c:
         be:93:be:96:53:44:11:54:08:18:7b:7f:64:4f:5d:78:90:34:
         cd:62:39:af:cc:9f:71:31:e1:c4:72:88:d7:3d:8f:54:78:66:
         d1:3c:a7:10:a2:01:9f:cd:2b:ac:b9:21:e3:a4:68:1f:4c:f3:
         b7:1d:69:59:26:f7:bc:e0:0b:60:cd:c2:1d:03:4c:a7:56:20:
         5f:c2:9f:e8:79:d6:f7:f6:68:0c:6c:b4:61:7f:c9:08:7d:32:
         2f:1b:90:99:1e:57:9a:ae:1a:13:98:d8:b1:52:6d:45:1e:bb:
         08:b8:7e:18:ab:cf:31:e8:cc:a0:7b:45:7b:1d:5b:bf:d1:8a:
         e1:25:da:73:75:e6:4f:7c:c7:5f:56:47:8a:74:32:43:8d:98:
         97:08:a1:4c:b2:c1:6c:0b:5b:b9:b6:0e:dd:4f:88:c8:7c:44:
         dd:f7:e8:8c:22:16:66:60:c7:5a:6f:b1:ed:c2:ec:65:68:49:
         73:71:2e:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqKUlT9HlFLi/RGIdZYkDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YjE0NjdjMjA0ODFkMTFiNjdmZjdiYWM2NDk4OTU5Zjcx
OGUxZjUwHhcNMjUwODIzMTYwMDEwWhcNMjUwODI0MTYwMDEwWjAzMTEwLwYDVQQD
Eyg3YzQ4OGFhNDY1OTUwODY2NjE1NDZkNjEzM2UwYzNhZWZhNjQwYzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlNKfsCEgXo4FY6jLsAtoEvTI8/w
L1cVDtacI5M+/LNiK9GQDPrjAhLZ4n06S8qIYsVetk2wIP45hj7avNRedRJmsz/b
S5zCD++e+d4mfggIQ+vh6cokS4yOuggc1MhSUrLORWqUs/hhzb1iO4csQppqWeuO
4fgYkJvMgP/7alRsysjeW2VIzfLZK7+URYhn4vexOQGinOg5SP1LjK+N+IMX3LFX
ElFHb6HhZDq4duI1b6PBB4i0U8PSPzVCAQgG81Mn4KR2L46uAFMaGebsdG1b/l84
orfQodjchOR+UFf/+Y1Z45j4JSWqhrR+fKF8BibEKagzcDnMcMhyKHYeawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxIiqRllQhmYVRtYTPgw676ZAwgMB8GA1UdIwQY
MBaAFESxRnwgSB0Rtn/3usZJiVn3GOH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkxGR2ZDQklIUkcyZl9lNnhrbUpXZmNZNGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYjdmNWEtZTg2MC00NDIwLWFiZWUt
MTlmODc0YTE4MWM1LzEvUkxGR2ZDQklIUkcyZl9lNnhrbUpXZmNZNGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zYjdmNWEtZTg2MC00NDIwLWFiZWUtMTlmODc0YTE4MWM1
LzEvUkxGR2ZDQklIUkcyZl9lNnhrbUpXZmNZNGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4vUIYST
gPmJ7WQTCwTXsXmUKmIhXOgRoBNwwpcSF8vfEAkICTecZoeqQ2DpMim3PvkLo2Gn
8YAKAPHxiRyxBZ79NOQ5mb98vpO+llNEEVQIGHt/ZE9deJA0zWI5r8yfcTHhxHKI
1z2PVHhm0TynEKIBn80rrLkh46RoH0zztx1pWSb3vOALYM3CHQNMp1YgX8Kf6HnW
9/ZoDGy0YX/JCH0yLxuQmR5Xmq4aE5jYsVJtRR67CLh+GKvPMejMoHtFex1bv9GK
4SXac3XmT3zHX1ZHinQyQ42YlwihTLLBbAtbubYO3U+IyHxE3ffojCIWZmDHWm+x
7cLsZWhJc3Eugw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:50:31 2025 by rpki-client